Force HTTPS for dashboard

We require HTTPS for things like login. Redirecting the dashboard to HTTPS from the get-go simplifies things a bit, especially when developing locally and using ports other than 80 and 443.

We now have a `fakeroku` command for simulating the Heroku router's routing of HTTPS -> HTTP, so we can have reasonable dev-production parity.

/cc @hampelm