Ensure all login is with HTTPS