use secure connection by default
extended web interface