https redirect, password reset emails, and tweaks