Allow http:// API base URLs

For testing, it's helpful to point the bindings at a server that doesn't support SSL. This pull requests adds support for those URLs, only validating SSL certs on HTTPS URLs.

r? @jimdanz