no need for https when communication with server