All api requests must be made over https.