updated API calls to use https