feature test
cleanup logging
redirect http to https
force https in production
authenticate index in prod
log less