fix state HTTP only