use unsecure http for local development

easier to test florence when you can run everything on your own machine. see eg. flowdock/florence#16