it looks like http works but that would make the auth token not be encrypted
it looks like http works but that would make the auth token not be encrypted