add ssl
switch back to HTTP after log in
add sessions controller
rename controller session to sessions
update todo list