- Add http basic auth (require SSL)
- Require valid SSL certificate (can be self-signed and imported into android!)
- Fix poster not loading (file_type == 4)