Force the admin and signup to HTTPS.