Use return, not rewrite, in SSL redirects

This is simpler and cleaner, and doesn't require nginx to invoke a regex
match on the request path.