Enforce HTTPS for milestone files to fix issue #4

This seems to fix issue #4 (see also comment on the issue).
But it would enforce the use of HTTPS for all users to get the milestones, I don't know if this is something you want.