(1.56) security fixes, password protection, https possible fix