Added a security filter to redirect /loginForm and /login to HTTPS in production.