Make https auth default for pull-all