use hostname, TLS

add hostname parameter; use TLS by default for authentication; don't
prefix errors
Periodic dump
includes plain text alternative to html