Added an @Secure annotation to force HTTPS on a controller.