catching bad user timezones, bad SSL fix, added http basic (remote) auth strategy