Use HTTPS for the login URL (fixes issue #163)