fix secure users for webdir and more gzip