added warning to make sure HTTPS is used