Nice. But launching a new service in 2017 without forced HTTPS or even HTTPS support is a no go. Please set this up. Letsencrypt does not cost a dollar.