enforces HTTPS connections