don't assume that we always use http, therefore add a PROTOCOL word (defaults to https)