add details on HTTPS setup