add https to avoid redirect