Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
Merge pull request #22 from AmirolAhmad/master

Force all access to the app over SSL, use Strict-Transport-Security, and...