Resolved 3.6, eventhough that solution is really bad and shouldnt be used in production code, just use HTTPS