docs
skip backbone bootstrap when not needed
enforce ssl; extra logging