Login redirects force HTTP

[skemper]

When installing this app behind an ALB that does TLS termination, a redirect to the login page (for an unauthenticated user) will hard-direct to the HTTP version of the site.

[skemper]

This also happens when getting redirected to /public as an unauthenticated user.