What would be the best practice way to redirect all logged in users to HTTPS? The login persists the site that's concerned. So if you login, come back to www.foobar.com a week later, you are still logged in - however, you'd be on the HTTP version.
The homepage on HTTP is not so much an issue - however can anyone suggest of ways to route the links HTTPS based on the logged in status? What would I need to override?