add ssl support: when server is publicly available generate a cert on startup, and direct nginx to use it.  also remove extra slashes from login page redirects.