Use data-main attribute to load the main file.
Require login and HTTPS to access the application.