Make HTTPS redirect configurable via DISABLE_HTTPS_REDIRECT