All resource requests must be made using SSL encryption (https). Insecure requests will return a 400 error.