more logging and switch to https