Require HTTPS on controllers.