This is probably always going to be https, but we should probably do it based on our http-https config switch.