fixed up auth-browserid to use http