Don't hardcode the URL to an https one either