self-signed https and websocket security added