remove HTTP:// over TLS for now