http_client: don't require secure rekeying

:)
port mirage
XXX_exn
fix lwt
fix feedback