Drop https for now (no cert)