force ssl for /users* and /admin* only for production
some trophy display updates
added new trophy set type leader_board_position_active