Enable HTTPS, ensure session information is secure