enforce https (SSL) when logged in (or trying to login)