HTTPS for frontend only Closes #4324