I have a similar problem here:
After finding that the logo and the large icon are loaded via http causing mixed content, enabling force_https fixed this. But login wasn’t possible anymore leading to a redirect loop. After disabling this option, login works again.
Why is this happening?
And why are only those two images loaded via http, while all other assets are loaded correctly loaded via https?