ensure we are using https for EVERYTHING?