remove requirement to be on http since we are now going behind webauth