ssl implemented, images accesed via http, base class for model and collections should redirect to forbidden login page