Add redirect_to_https config variable

This defaults to false but when set to true the secure middleware is
used which redirects users to the secure version of the site.