switch everything to https