What is the best way to force all connections to use SSL?
if($scheme == 'http')...
redirect to https://