install over https to make pip happy