http instead of https for oauth.js on staging