upgrade all download links to https