move releases to non https