force https to access the api