Fix #63 - use TLS for API calls