use https for remote comm.
reset default values on login screen