curl: use https