docs: how to use a local browserid copy in your manual tests

There are origin and mixed content pitfalls.