Allow to enforce SSL

This PR adds an option that allows enforcing SSL. It's disabled by default and can be enabled by setting the environment variable ENFORCE_SSL=true.

@swanson Just thought I'd share this. I added this for myself, maybe it can be useful to other people as well.