fix return URL post-auth
create homepage that doesnt require auth - closes #8
force SSL in production