If my understanding is correct, the default callback url of the ConntectionController is the home URL of hosting site which is not a secure URL. If it is correct, I am wondering why I need to set a secure callback URL if I need a customized one (http://static.springsource.org/sprin...s/1.0.x/api/)?