Update strategy.js

use https api endpoints.