Force redirect to https (uses js)