fixed demo under https