added notice for HTTPS as sugggested by abstractj