[#994] Permanent redirect to https for controllers

(It was previously only a temporary redirect)

Fixes #994.