switch to https endpoints