use plain http for conf page since it does not use SSL