Merge pull request #15 from adsabs/vss

Application logfile implemented (level+filename configurable in local_co...
Fixing bug that surfaced only now: 'user' object is available only after successful validate(); maybe new version of flask_security
Add sslify option to app (redirect all requests if not request.is_secure)