scheme of API responses hardcoded to https