modified to expect https
include scheme in URL construction