modify http into https to enable the application on browsers that don't allow mixed content