hacking around https bullshit