fixed http vs https