leapcode/leap_platform — pull request #5 by elijh (2013-07-29 08:13:26+00:00)
Title: security related changes to webapp

two things
* add config webapp.secure, default to false. if true, cookies are secure and hsts is turned on.
* add config webapp.admins, default to empty list. if configured, these accounts will get admin access in the webapp.