make sure demo still works without https