update protocol to https