force ssl via javascript