make https protocol optional