HTTPS accepts all certificates

In order to get https to work quickly it was set up to accept all certs. Instead:
*Unsigned certs should be accepted if "Accept Unsigned Cert" is checked in the user profile
*For self signed certs the user should be notified and asked to accept, and upon acceptance the cert info should be saved into the user profile. If the cert changes later the user should be notified.
