Force HTTPS on client