Remove secure + redirect to www.

We'll use Fastly for SSL for now.