Always redirect to HTTPS