add self-signed cert for default website fix activate-user