fix #190. Close #194

Add SSL option to the api endpoint, and make it possible to disable
non-ssl port binding by not setting the port in the configuration.