force SSL and update README with apps