HTTPS now defaults to false, can be turned on with -Dsecure=true