HTTPS is required for OAuth. A configuration option, ohmage.require_https, can disable it when defined and set to 'false', which is auto-deployed in Vagrant. #790