Not sure if this was intentional, but when you disable auth with the --no-auth flag on the CLI, SSL is also disabled.

It's a bit confusing. In order to get SSL working, you need to use a password. When you don't have a password, you have to use the site/app via plain ol' HTTP.

Maybe there's some logic that I'm missing, but this had me stumped until I dug into the code.