No need to force HTTPS,
https://duck.co/blog/https-on-by-default