explicit https

avoid delay from redirect by explicitly asking for https