web: use more https links