use HTTPS for the SDK