The site will have to set the following security headers:

Strict-Transport-Security
X-Frame-Options

The site will have to make sure that the session cookie (named connect.sid) will have the following flags: secure, http-only

localhost https
Merge branch 'master' of https://github.com/adamlofting/adhoctribution

Conflicts:
	web.js