forces https

I believe that this change forces people to visit the site with HTTPS, not HTTP according to [here](https://developers.google.com/appengine/docs/python/config/appconfig?csw=1).

I wasn't able to get it working on localhost due to SSL errors, so we might have to push to prod to test.