account for ssl in cmb url