start http on port 80; force redirects to 443 (fix #47)