Document preference for https over http