fixes for https