updates to the moolah plugin
- use HTTPS by default