removed insecure credentials transmission warning, see #318
mention need for HTTPS in the relevant READMES, see #318