Throw 426 error if security is enabled and user tries to use HTTP