avoid the overhead of https