added SSL and authentication to web app