make SSL the default

[wilzbach]

As Google will actively downrate us if we still serve requests over HTTP, how about redirecting all HTTP reqeusts to HTTPs by default (if SSL is configured)?

[stonemaster]

This sounds like a reasonable thing. We just have to make sure to still allow local developers to work without an certificate i.e there should be switch that enables that behaviour. In our production docker container will be turn that on by default but locally we won't.