security settings upgrade
removed unnecessary ssl middleware