use https where available (#5)