I do have a certificate from an SSL authority but for now that's just a temporary  SSL certificate generated on the server during testing time. I'm not sure if I'll stay with this system as a base because its quite slow. There's about a few dozen active users so any changes will be announced first.

I'm still working on this project in my free time and will be supporting it more aggressively in the future, but right now the demands of real life are taking the focus.