Forcing SSL for signed_in pages and authentication (fix #31)