redirect http gemss2 traffic to https (but still allow http for other
server names - e.g. hitting internal staging server)