main page is alive over HTTPS