switched app.mainsvr to https so it stays secure