fixes, use https for api call on prod