update the instructions to HTTPS