Added redirectToSSL option to block non-SSL access.