Force HTTPS for the entire site

* We already support HTTPS
* The data on the site includes protected information like grades
* We only use the *.appengine.com site url currently
* Leaves no reason not to be using HTTPS everywhere