encrypt password/api-tokens

With only http the credentials (esp password/api token) are sent in plain text.

This changes communication to encrypted.
Merge pull request #2 from 85pando/master

encrypt password/api-tokens