Support HTTP sources

Relax validation on TileJSON sources to allow HTTP, not just HTTPS.