added .htaccess to enforce SSL