https works
recommended settings