use http url for firewalls that hate https