Bumped config.xml up a level, added HTTPS

Bumped config.xml up a level, added HTTPS