force ssl

I noticed that perma.cc doesn't force to https. I know that there _may_ be reasons not to have HTTPS, given the concern about authoritativeness, it seems that https should be default. So, I recommend using the sslify (https://github.com/rdegges/django-sslify) middleware.

Because it's using a redirect, it's not perfect, but it's better.