added note about http/https