Encrypt all web traffic

Right now everything isn't really being encrypted except for some stuff with `check_password_hash()` in main.py

this should ideally be something we do later if not easy to easily integrate into the project code base

because this will make things 800 times harder to test