another small HTTPS issue