changed url to be secure