adding HTTPS work around for authentication