don't force https
updates