Thanks for your comment. There is no reason for HTTPS on our demo page because there are no secret transmissions there. Actually, this demo shows that our solution may be used on every kind of website even they don't use HTTPS. Of course, authentication itself and all API calls are via HTTPS.