Use https by default (since access to the API by HTTP will be disabled on 4/27)