Remove md5 from assets on private policy
Remove overlay after trowing errors
Force SSL
Thin webserver
load fonts and sharethis from https