fixed hard coded URLs on HTTP instead of HTTPS