So I thiiink we still need this. I talked to Tim about this briefly. He thinks, in order to let this be hit over non ssl, you still need this... but it may not work. We definitely need to check that shit in staging.