Update endpoints to use HTTPS where possible.
 -- There are probably more; see https://core.trac.wordpress.org/ticket/28507
support older Django versions without django.utils.timezone.now