just noticed the message "you should prefer https" was missing