merging http and https: next steps