small fixes for https