more fixes on https