Evaluate and improve server security

Search for any security flaws in the server.

This includes:
- Securing the server with https. If this is not done in this issue, a separate, detailed issue should be written up.
- Determining if the `isSameOrigin` utility handles all necessary cases.
- Verifying that `request.hostname` is the hostname of the server and not the server hosting the client making the request.

This also should include researching best practices and determining if changes need to be made to the server.