adding redirect and postMessage
Use SSL everywhere