Add in more robust support for being behind a proxy
Fix password reset rate limit to work on ip, not email which changes every request
Be more verbose with ip debug output
Merge branch 'master' into master-redesign
update security page
Update project settings over http