Using https in url as a first step of locking down the backend