also, I think HTTPS should be off by default for at least this next release... I don't want there being any surprises when folks go to deploy this and all of a sudden, by default, it expects another port open for HTTPS.