maintain session HTTPS to HTTP.
apply https in userWrite.
Merge branch 'master' of local repository into oauth
test oauth.