be more assertive about skipping openstates on https (#3)