add instructions for https