Examples on the 'Quickstart' page are misleading due to HTTP usage.

[papsl]

I suggest changing examples on Quickstart to use HTTPS schema, from:

var client = new WordPressClient("http://demo.wp-api.org/wp-json/");

to

var client = new WordPressClient("https://demo.wp-api.org/wp-json/");

Since WordPress authentication only works when TLS is used and in case of HTTP will return "Sorry, you are not allowed to create posts as this user".

[papsl]

I changed the readme.md file and created #372 pull request. Since I lost a few hours due to HTTP in example today. :)