move serving https file after login works, update #1000