Deployment: No HTTPS enforcement, credentials sent over plaintext in production if not configured in reverse proxy

Deployment: No HTTPS enforcement, credentials sent over plaintext in production if not configured in reverse proxy #590