temporarily switch the “secure” url to be http so that it works in development.