re-enable "must be HTTPS" test, remove dead code