reverting to non-https app