fix(server): Remove X-FRAME-OPTIONS for Legal and Terms
feat(server): serve directly over https

new config options key_path, cert_path

this eases local development against firefox, which requires
everything over https.
Merge pull request #1173 from elelay/direct_https

feat(server): serve directly over https
Merge pull request #1170 from vladikoff/no-x-frame-legal

fix(server): Remove X-FRAME-OPTIONS for Legal and Terms