Switch to HTTPS by default. Closes #240.