remove http to https in a few places for security reasons