fix HTTPS