enabling that it can be safely opened on https