Tweak appcast description
Simplify defer
Add Github auth
Add HSTS if base url is HTTPS
Update godir
Add https redirect
Fix checked status
Add REQUIRE_SIGNATURE env var