feat(backend and frontend): support for SSL/TLS encryption

details:
* backend now only listens on https
* frontend talks to backend via https
* documentation on security updated
* push security related stuff to config.js