Add redirect_to_ssl parameter.
Enable fastcgi for ssl vhosts.
enable fastcgi-ssl only if ssl == 'ensure'