ssl: SSL should be disabled by default, enable per login
extensions: tabs and other cleanup