update authentication and api endpoint urls to https