Secure SSL defaults.
Recommend using OAuth2 instead of OpenID for authentication.