final HTTPS fix