Change to HTTP to HTTPS redirect.

 Saves the user having to login twice, Once over HTTP and then again over HTTPS after the direct. 
This also means that the user is not sending their password in plain text over HTTP.