Configurare tomcat e le webapp per utilizzare sempre https 

From http://www.itworld.com/development/79351/how-configure-tomcat-always-require-https