changed 'all URLs' to https