deploy: disable https