default to https instead of http