use http urls instead of https where possible