add HTTPS; add RESTful API Authentication