adding authentication, requirements for adding code (no auth requirements yet), 404 for any unresolved url, and https requirement