allow for http and https