API can not only be accessed via https.