Config option to force sensitive pages over SSL

Closes #38 & #39

Requires my schema agnostic patch.