getting rid of https because of certificate issues in production