fix urls to work over ssl