added option to force all traffic to HTTPS