Redirect clients to the correct secure URL instead of just 403.

Since it may be useful.