fixes #1: add https support