sorted out authentication and serving json over https