if it's a CL request, make it https