update urls to https