verify the https scheme too
try specifying a url_prefix