Force SSL by default

This is based on an HN comment recommendations I think it's a good idea. https://news.ycombinator.com/item?id=8146641