Some progress, but need to serve via HTTPS to test