update; check for https