checks https too