Use HTTPS for multiplayer lobby

[rugk]

HTTPS should be used in the lobby in order to protect passwords. TLS is fast ​https://istlsfastyet.com/ and when you use HTTP/2 (if you use HTTP), you could even make it faster than without TLS: ​https://www.httpvshttps.com/

Of course, these test/stats applies to browsers, but HTTP/2 with TLS is still faster than HTTP without TLS. Of course, you do not need to use HTTP/2. TLS is enough.

Threat model: Any network attacker; three-letter agency or attacker in wifi