Remove https

So we don't get a security warning when redirecting to authorize the app
Nevertheless, the API will use https