Some sane request limits
Default to HTTPS