Use https with the default snakeoil cert