improved language notifications and drop all http conections https only allowed