Point to non-https by default