Add update endpoint, require https