add insecure-https config option, improve error reporting
more x-editable