convert to https in almost all locations