make secure HTTPS server for REST