change user api requests to https