The quick start uses a self signed certificate that gives errors in browsers and requires folks to accept the certificate in their trust chain.
I suggest we remove the secure layer part from our quickstart just to make sure we don't train our users to accept any certificate. WDYT? Martijn
