Serve rebar without https, closes #2152