Move to https by default an add X-API-Source header