added force to-ssl redirect for https