setting to remove https