change API URL to use https - closes #4