Move health check into controller.
Force SSL.

* Allow http for health check.