make http vs. https links more configurable

- stick to http for the moment