redirect users to the SSL version of your app