Explicitly construct the ```gotpantheon.com``` domain for secure redirects.

[joshkoenig]

This should prevent redirecting to a real domain name which is not set up to run under SSL.