Broad http permissions to support private git repositories (fixed #1436)

TBR: @devoncarew