Update to HTTPS

https://blog.whatwg.org/rolling-out-tls-and-hsts