quick fixes: controller redirect and removed ssl