https is now always enabled; http can be turned off