Use plain HTTP for non-login requests