@@ -40,8 +40,6 @@ app.use(compression())
 app.use(bodyParser.json());
 app.use(bodyParser.urlencoded({ extended: true }));
 
-app.use(checks.ssl_headers)
-app.use(checks.redirect_to_https)
 app.use(checks.static_rewrite);
 
 app.set('trust proxy', 1);
@@ -59,7 +57,6 @@ app.use(session({
   secret: settings.session_secret,
   resave: true,
   saveUninitialized: true,
-  cookie: { secure: (process.env.NODE_ENV === 'development') ? false : true },
   store: require('mongoose-session')(mongoose)
 }))
 
 
@@ -6,9 +6,13 @@ var express = require('express')
   , application = require(__dirname + '/../controllers/application')
 
 router.route('/login')
+  .get(checks.ssl_headers)
+  .get(checks.redirect_to_https)
   .get(application.login);
 
 router.route('/login')
+  .post(checks.ssl_headers)
+  .post(checks.redirect_to_https)
   .post(passport.authenticate('atlassian-crowd',
   { failureRedirect:'/login', failureFlash:"Invalid username or password." }))
   .post(application.authenticate);