uses HTTPS by default