Use HTTPS by default for community API

We should totally do this, but it seems to give a cryptic OpenSSL error right now. Putting this in for tracking.