Always use SSL

I thought this was the default option. Apparently not, and now it is
required by Twitter --- which is a good thing.