allow unencrypted http on android 9

this commit is just to make policies equal and independent on various android
versions. support for http might be removed in the future across all versions.