Use HTTPS instead of insecure HTTP

Since HTTP headers are not encrypted, credentials can be stolen very easily. Therefor I suggest the use of HTTPS only.