Unsecured http interface

@rcrichton can you please review when you get a chance?

By default a mapping _won't_ be exposed on the unsecure interface. In order to expose a mapping on this interface, a user needs to add a property "allowUnsecured": "true" for that channel.