hash saving now works, and uses https