log in functionality
Enforce HTTPS
Show user name in API response