Use https url for bootstrapping. This works independently from authentication.