Requests to drupal.org should go over https