force https for authenticated user session
link to https for registration/login pages
force https for login and registration pages