add a setting to enable force https

add a setter

make prefer https optional

add higher test timeout for https