Force https for authentication URLs