the Congress API docs use HTTPS