validation url is now https