chrome://flags/#allow-insecure-localhost doesn't work anymore. I think it was taken out, or we have an internal policy that removed it. I think it was also deemed "experimental" and google said it could be removed in the future.