cosmetics & LoadImageFromTarballAsync cancellation
convert endpoint scheme tcp to 'http' internally

this probably should be moved into credentials class as cert auth would
make it https