surge.sh: Adding a certificate on Surge, Forcing HTTPS redirects