There should be a check for localhost/debug servers somewhere in here. Local installations without SSL need to be able to test form submissions.