fixing urls to use https from #4920