I'd like us to allow this to be conditionally turned off so you can run the app locally but against production resources.

Plan B is we figure out how to use SSL locally, properly.