Trying http (not https) for rsvp button because of XSS