Add ssl_required decorator
Tweaks to ssl_required decorator
- Use a permanent (301) instead of temporary (302) redirect
- Only replace the first instance of http:// with https://
Require SSL on many UI views, and allow turning on/off SSL apart from DEBUG