don't require SSL
move back-end setup instructions to docs folder