modified login to use https everywhere