recommend https by default