fixed: some links use http instead of https