Log a warning if posting to a plaintext endpoint

This is mostly precautionary, as all valid endpoints should be providing service over SSL.

@ntalbott @Shopify/payments