Adding no ssl case to experiment ssl handshake for a resource via Timing-Allow-Origin