Added

• support https server
• NotFoundHandler for handling 404 requests
• option fbidhttp for blocking public plain http incoming requests
• option tdstream for accepting requests from trusted downstream (if set) only
• option xheader for toggling this feature

Fixed

• reset password to disable password authentication for key authentication
• port number typo