support loading external configs
make onyx an SSL-only webapp in non-debug mode, setting HSTS and redirecting