Force HTTPS for the entire site

[danstiner]

• We already support HTTPS
• The data on the site includes protected information like grades
• We only use the *.appengine.com site url currently
• Leaves no reason not to be using HTTPS everywhere

[curtisullerich]

Can't merge from the browser. :( Looks good though.