web: switch to http, https has invalid cert right now