delete unused test code
fix test
move rest of update_scheme() to util
in post handlers, use https for profile pictures so we don't cause mixed mode errors