Force Redirect HTTP to HTTPS

Add the SSL-only cookies among other things.

In our recommended way to setting SSL, this is all handled automatically: