switch to https for production api