remove ssl requirement in specs, relocate projects controller specs