HTTPS enforced at Spring Security level