Invalid CSRF but token is present coupled with TLS abbreviated issues

If I use http://:4000 to login it fails every time, this is what I get in the console:
[error] Authentication error: type: unauthenticated unauthenticated

I am also using the Guardian plug-in.

I generated a self-signed certificate as described here:
https://medium.com/@brucepomeroy/running-phoenix-with-a-self-signed-ssl-cert-in-dev-acec3e20178e

but when using the https://:4443 uril I get drowned in the console with…

[info] [‘TLS’, 32, ‘server’, 58, 32, 73, 110, 32, 115, 116, 97, 116, 101, 32, ‘abbreviated’, 32, ‘received CLIENT ALERT: Fatal - Certificate Unknown’, 10]
[info] [‘TLS’, 32, ‘server’, 58, 32, 73, 110, 32, 115, 116, 97, 116, 101, 32, ‘certify’, 32, ‘received CLIENT ALERT: Fatal - Certificate Unknown’, 10]

This site used to work locally with my self signed cerftification just fine. I upgraded to Elixir 1.7 a week ago. Think we are on v2.2 of Phoenix still.

I have no idea why this is happening. The form csrf token is present on submission but is obv., failing some check somewhere.