change endpoints to https