add (commented) implementation of ssl enforcement redirect.

This is now done via the symfony security component in
app/config/security.yml.

Should this be enabled by default in development or added
at build time?
use routes (where possible) instead of paths in security.yml