SSL Errors and Unauthorized after Update to 1.3.3 (no metadata, no streaming with forced HTTPS)

After updating to 1.3.3 (Ubuntu 16.04) the Plex Server seems to have issues connecting to http://127.0.0.1:32400. When having secure co********nnections set to "required", Plex fails to start streaming at all:

Dec 20, 2016 23:54:10.348 [0x7fe1ea7ff700] DEBUG - Found session GUID of xyz in session start.
Dec 20, 2016 23:54:10.349 [0x7fe1ea7ff700] DEBUG - TranscodeUniversalRequest: using augmented profile Web
Dec 20, 2016 23:54:10.349 [0x7fe1ea7ff700] DEBUG - Downloading document http://127.0.0.1:32400/library/metadata/147984?X-Plex-Token=xyz&checkFiles=1
Dec 20, 2016 23:54:10.349 [0x7fe1ea7ff700] DEBUG - HTTP requesting GET http://127.0.0.1:32400/library/metadata/147984?X-Plex-Token=xyz&checkFiles=1
Dec 20, 2016 23:54:10.350 [0x7fe1f4ffe700] DEBUG - Request: [::ffff:172.16.1.3:40644] rejected because secure connections are required
Dec 20, 2016 23:54:10.350 [0x7fe1ea7ff700] ERROR - Error issuing curl_easy_perform(handle): 52
Dec 20, 2016 23:54:10.350 [0x7fe1ea7ff700] WARN - HTTP error requesting GET http://127.0.0.1:32400/library/metadata/147984?X-Plex-Token=xyz&checkFiles=1 (0, No error) (Empty reply from server)
Dec 20, 2016 23:54:10.350 [0x7fe1ea7ff700] ERROR - HTTP -52 downloading url http://127.0.0.1:32400/library/metadata/147984?X-Plex-Token=xyz&checkFiles=1
Dec 20, 2016 23:54:10.350 [0x7fe1ea7ff700] ERROR - TranscodeUniversalRequest: unable to get container: /library/metadata/147984?X-Plex-Token=xyz&checkFiles=1

Fetching metadata won't work either (even when secure connections are only "preferred"):

Dec 20, 2016 23:46:32.108 [0x7fe1ee7fe700] DEBUG - Matching 'xyz' (ID 147994) with agent 
Dec 20, 2016 23:46:32.111 [0x7fe1ee7fe700] DEBUG - Issuing search query: http://127.0.0.1:32400/system/agents/search?mediaType=1&id=147994&identifier=com.plexapp.agents.themoviedb ...
Dec 20, 2016 23:46:32.111 [0x7fe1ee7fe700] DEBUG - HTTP requesting GET http://127.0.0.1:32400/system/agents/search?mediaType=1&id=147994&identifier=com.plexapp.agents.themoviedb ...
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] DEBUG - Request: [::ffff:172.16.1.3:40602 (WAN)] GET /system/agents/search?mediaType=1&id=147994&identifier=com.plexapp.agents.themoviedb ... (5 live) GZIP Signed-in
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] VERBOSE -  * User-Agent => Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] VERBOSE -  * Host => 127.0.0.1:32400
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] VERBOSE -  * Accept => */*
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] VERBOSE -  * Accept-Encoding => gzip
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] VERBOSE -  * duration => 5950175
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] VERBOSE -  * filename => xyz
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] VERBOSE -  * id => 147994
Dec 20, 2016 23:46:32.112 [0x7fe1f4ffe700] VERBOSE -  * identifier => com.plexapp.agents.themoviedb
Dec 20, 2016 23:46:32.113 [0x7fe1f4ffe700] VERBOSE -  * lang => de
Dec 20, 2016 23:46:32.113 [0x7fe1f4ffe700] VERBOSE -  * mediaType => 1
Dec 20, 2016 23:46:32.113 [0x7fe1f4ffe700] VERBOSE -  * name => Source Code
Dec 20, 2016 23:46:32.113 [0x7fe1f4ffe700] VERBOSE -  * openSubtitlesHash => xyz
Dec 20, 2016 23:46:32.113 [0x7fe1f4ffe700] VERBOSE -  * plexHash => xyz
Dec 20, 2016 23:46:32.113 [0x7fe1f4ffe700] VERBOSE -  * year => ...xyz
Dec 20, 2016 23:46:32.113 [0x7fe1f4ffe700] DEBUG - Completed: [::ffff:172.16.1.3:40602] 401 GET /system/agents/search?mediaType=1&id=147994&identifier=com.plexapp.agents.themoviedb ... (5 live) GZIP 0ms 338 bytes
Dec 20, 2016 23:46:32.113 [0x7fe1ee7fe700] DEBUG - HTTP 401 response from GET http://127.0.0.1:32400/system/agents/search?mediaType=1&id=147994&identifier=com.plexapp.agents.themoviedb ...

Everything worked fine in 1.3.2...
Plex seems to not check if the request is from localhost thus enforcing secure connections even when using the hard-coded http://127.0.0.1:32400 url internal.