allow http besides https in Gatekeeper, fixes #960