suggestion: https users connecting over unencrypted public wifi or through the tor network will have their user name and password exposed to eavesdroppers. enabling https will prevent this.