allow non ssl if localhost and testmode.  this allows the flask testing server over ssh for testing without restarting the real uwsgi server
remove watermark in favor of global test mode flag
harden the server config.  don't serve any files that I didn't mean to, and redirect root to the main web page