Block non-https calls to the api