require https and ref // instead of http:// on site