force SSL for login form