login: redirect to secure url before login

* Check if request.url is secure and if not then redirect to secure url
  before showing login.

Signed-off-by: Mikael Karlsson <i8myshoes@gmail.com>