forces ssl in production
adds checking if current user is same as on cobot
removes authentication via email