making it work without https
cleanup and push