added https notice and use correct https for auth tests as suggested by abstractj