Include status code when redirecting.
enforce TLS on most of the site.
Vend only https asset urls
update ami