Making app accessible only through https