remove the req.secure hack
fix client-side id check
remove any leading ww's in hostname
increase the timeout when uploading an image directly