Use HTTPS for Special:MWOAuth/token

For security, we really should be using HTTPS when returning the token
back to the consumer. But when RSA is in use the consumer secret doesn't
matter.

Bug: 54110
Change-Id: I9982b1f3a1a14d472882898ee758b4ea38942c66
Merge "Use HTTPS for Special:MWOAuth/token"