update protocol to use https