added warning when connecting to a url without 'https'