forcing ssl via javascript