Fixed #1990

Also using https for assign sign
Don't sign to https - it's secure anyway

And by going to https from http, the session data is lost, so we don't have a workaround at this time.
Remove cors support from signing
Bumped to alpha.
Use line widget instead of inline
Add cache-control

Fixes #1995
Modify design

Currently missing delete functionality now
Tweaking asset management style

Goes slightly against @dannyhope's design, but it's works on the page.
Final update to desgin
Remove flex & tweak line-height
Removed file-size dep
Merge pull request #1999 from jsbin/fix/1990

Update to assets