Redirect to HTTPS

Tested on staging. Closes #12.