Require HTTPS for login & signup in production

Closes #286