force cookies to only be sent via HTTPS
require bcrypt for passwords
added new folder for cryptokeys and git will ignore this folder because of the new .gitignore file added there
https baby! booooooom!