use https for authentication (now required by the twitter api)