Allow non-https access click-counter config requests