run the app on https. fixes #2
Sign in lock implemented. fixes #1