turned on SSL for all urls. made the SVG inlining happen using templates instead of file streaming. made login and logout urls external so that the browser doesnt cancel them on us.