fix incorrect calling of tickets_path
config - add force_ssl to config, add configuration notes to README.md
set no-cache headers in the response
add header to prevent iframes
remove freeze on APP_CONFIG for now
Merge pull request #58 from elijh/bugfix/security

fix misc security related bugs