setup: check for open https port with an invalid cert, even if configured to use http. Also a bit more word-smithing on the resultant error text but it's still not perfect.
core fixes to allow statusnet connector to work
make it easier to plug into .well_known, for instance to tell the EFF to fuck off and not block pages from the free web just because they use cookies.