check for https as well