Add tests to ensure account methods require HTTPS.

We would like to ensure users don't attempt to send off their
credentials in plain-text, so we fail early when users try to use
account-related ops with unsecured (HTTP) connections.
Bundle & rename GSON with the client lib.