Add notes about HTTPS