revert to non-https