`http://localhost:.../` is OK, but the `.example.com` URLs should probably be HTTPS. Just to avoid giving anyone the wrong idea.