bump activator to 1.2.7
bump to play 2.3.2
require https in prod
add tests