vagrantup.com is not https either :(