Since you mentioned SSL for free on *.dotcloud.com, maybe it would be a good idea to force SSL for everyone on your main site: http://i.imgur.com/f1X7n.png http

Since you mentioned SSL for free on *.dotcloud.com, maybe it would be a good idea to force SSL for everyone on your main site: http://i.imgur.com/f1X7n.png http://i.imgur.com/f1X7n.png steal a cookie get an API key...