Force traffic to SSL

JavaScript seems to be the only way to do this via GitHub Pages without
moving to a local Jekyll deployment.