so, why did you uncommented the secure end point if you are not using SSL/HTTPS? In this case you should be using the default, unsecure endpoint
< endpoint name="Public" address="" behaviorConfiguration="AutomationDesignerEndpointBehavior" binding="webHttpBinding" contract="CMS.WebServices.IWorkflowDesignerService" />