security: issue a warning when credential are exposed due to plain http ...

...URL

This may not be important when using a JIRA server in a secure network, On the other hand, using https is important when connecting to Atlassian's server as a http request will expose credential to any snooper.

If needed, a `-quiet` option can be added to silence this warning, but I think the default behavior should encourage security.

All the best