OIDC doesn't work out of the box if the redirect URI uses http.