Always use SSL.
Add basic GitHub OAuth flow.