use https to access private releases