upgraded to MVC 5 and required HTTPS