minor: https acces for waveJS API in controller