updates for https