editor: redirect http to https

appears to silently not redirect on localhost,
which is good

also added the redirect to the app so it can access
api.php/library.php via https