My understanding, HTTPS is only enabled for login part now, so thanks to @CapnKernel for bringing this out