dealing with https