Serve API over HTTPS

[mattjudge]

The web API should be made available over HTTPS to allow UI clients to connect to it securely, avoiding mixed content errors. Particularly useful if the UI clients are using browser geolocation APIs, since they now require a secure context.

[maciejopalinski]

I think that is outside the scope of this project. If you need HTTPS, setup a simple reverse proxy using Nginx.