use https in dep links