allow localhost redirect URLs without SSL in OAuth apps (for easier development) #wip h/t @realhackteck
close