Added https only to forms auth, and fixed broken routing