use https for oauth fetches