updated URL to force https