Letsencrypt is free. Website & backend should definitely be ssl encrypted with https. Maybe https://github.com/will-in-wi/letsencrypt-webfaction