fixes. swithed to https