mandatory https fix