run api call over https rather than http