ensure we use https for all outbound requests