Update default.html

enforce a client redirect to https