PAL: use http instead of https for S3