changed protocol so that it is always https