[VCT] Fix VCT's controller default API URIs (#245 note-35)

Use plain HTTP as controller has no configured certificate.
Merge branch 'feature245' into testing