Force any login operation to go via https