Force is_secure to be true so that redirects always go to https