switched to https for most things