Enforcing HTTPS redirect on a website