fix(IE): allow access to config over non-HTTPS