added ability to disable https support (for development)