telling rebar to use https, due to corporate foo