login page is now independent on build params 2, imageservlet return images only over ssl