You don't need SSL. The problem is likely that you've already approved the permissions at some point in the past that JFBConnect is requesting.
To really test, go to the Account Settings -> Apps in Facebook.com and remove your app from your *personal* profile. Then, when you click the button again, you'll have to re-approve the permissions. Do *not* delete the action application from your Developer's area though.
Hope that helps,