<p><pre><code>   &gt; However, the underlying api is on HTTPS.
</code></pre>
No, it isn&#x27;t.  I tried logging in to the app store (<a href="http:&#x2F;&#x2F;apps.drov.io&#x2F;" rel="nofollow">http:&#x2F;&#x2F;apps.drov.io&#x2F;</a>), and this is what network inspector showed:<p><pre><code>   &gt; Remote Address: 213.168.248.158:80
   &gt; Request URL: http:&#x2F;&#x2F;drov.io&#x2F;ajax&#x2F;account&#x2F;login.php
   &gt; Request Method: POST
</code></pre>
Where is the underlying HTTPS?  The failure resulted in a javascript-based redirect to:<p><pre><code>   &gt; http:&#x2F;&#x2F;drov.io&#x2F;login&#x2F;index.php
</code></pre>
Again, no HTTPS.  I can&#x27;t understand why you would launch without fixing that first.