add in redirects and https_only configuration