since we switched to after_initialize, name is not there on new object.
hide unprotected attribute from the UI for now

since https does not offer additional security as it is now, I've changed
the default to include http access as well and hide the option in the UI.
Merge pull request #28 from ohadlevy/minor-fixes

Minor fixes