fix routes to not use https