editor: redirect http to https

appears to silently not redirect on localhost,
which is good