fix password validation #24
add SSL in production #24