use http for requests until we get an SSL cert