Force login to go through secure URL