phabricator - redirect/enforce http->https

as requested by Chase and used on other services
behind misc-web -- using L flag to proto redirect
to make rewrite play nice with native phabricator
path rewrites.

Change-Id: I4d207a4d27d09716d535e3c24978e99665822dcd