webfinger: use https as default fallback instead of http