enforce https for every page

Old school! Assuming you’ve got apache in front of your app, have you tried adding a rewrite rule to redirect all http requests to the https versions ?

Fred