use http not https when appropriate