set login/out, sign-up pages to be https, but it runs in that way only when deployed
fix a bug of separating key.py
Merge branch 'auth' into https
forgot to add /logout to https last time