OIDC redirects need to force HTTPS behind TLS-terminated ingress

[MikeEdgar]

OIDC redirects need to force HTTPS behind TLS-terminated ingress. We need a configuration option in the OIDC section of the security configuration to indicate HTTPS is to be forced for redirect URLs originating from the OIDC framework.