Demo endpoints shouldn't be https