everything is set to properly load things over https