Require HTTPS in app.json