Added a separate route for logging in by token

This is to facilitate the (convoluted) HTTP/HTTPS login flow.
Update force_ssl w/ HTTPS host option

Also, no need for the environment check (disabled in dev)