Force https for API URLs