remove https hardcoded