[enh] Force HTTPS when set authentication headers (closes #3)