Taking Abdi's suggestion: maybe https is necessary