Cleaned up https redirect code to be more consistent

* $wgMWOAuthSecureTokenTransfer is checked for as needed
* Also made $wgMWOAuthSecureTokenTransfer on by default

bug: 54806
Change-Id: I211909953b0215a418358a8c72bac7977b118817