Turn on HSTS on the facilitator
Document how to do it in facilitator-howto.txt.
https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security https://tools.ietf.org/html/rfc6797
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information