no HTTPS on calls to Congress API