to make sure it actually is using https