Sandbox should not be disabled in https whenever a method is not marked as https explictly

This PR is to enhance issue #283 and fixes issue #330.

What I did is to only disable the sandbox whenever a method has been explicitly marked as https and accessed through http. But whenever you access through https a method not explicitly marked it will allow it too!

@SimonSimCity does that break something for you?