force ssl = true
change api endpoint to https