Document https redirection setting for authentication.

I think it should be set from the YAML file. For example the sandboxes don't use HTTP, but use the production environment. @e0d what do you think?

The other scenario is that I can set it to `True` in `base.py` and turn it off for the other environments. When running on a sandbox the YAML file has to do the same.