added core api functionality and switched api calls to https