Sorry dumb comment, you can do this even with https... thats what I get for commenting too early in the morning