Change htaccess to force users using https