Yes, that's what I'm saying, it checks if the IP address is

127.0.0.1

or

localhost

, since you are using a real IP address there it is rejecting the request as an attempt to send real credentials on an insecure connection