prepare for https - part 2