Regarding security, good point. SSL is supported; however, we are still in the process of obtaining a secure certificate signed by a CA. Most browsers would not let the demo run SSL over AJAX so we have it temporarily disabled, but once we get a certificate, we will re-enable the SSL support for the API. At that point, one simply has to use https instead of http for API calls.