add advice for https everywhere plugin