Remove http scheme argument, force HTTPS.

Also fixed openid-demo to actually parse flags, serve TLS.
Add TLS redirect to demo, example cert creation.