Yup! Apparently my browser is "helpfully" rewriting HTTP URLs to be HTTPS, what could possibly go wrong? facepalm False alarm, sorry...