force_ssl, tweak frame rate
Only enable SSL in production.
Add refresh_token to the User model.