Enforce basic auth over https (#9)