make sure we use https