using https by default