fixed #2 https is now the default