no point not using an https endpoint for the public api methods