Letsencrypt is free. Website & backend should definitely be ssl encrypted with https. Maybe https://github.com/will-in-wi/letsencrypt-webfaction
