force https login redirection + set cookies accordingly

PLAT-1540 #time 0.5h