update profile url to HTTPS