Enable HTTPS access in development

[maurizi]

This would be helpful in testing things like our Content-Security-Policy headers in development, and will ultimately be necessary if we ever need to add Location API use, which is only supported over HTTPS.