updated URLs to HTTPS