changed auth to HTTPS