changed web.xml to force https
Merge pull request #17 from semurr/httpsOnly

changed web.xml to force https