[FEATURE]: Force admin access via SSL

[jakewrfoster]

Description

Alleyvate should force all admin access via SSL. eg. define('FORCE_SSL_ADMIN', true);

Use Case

All access to the admin area should be secure for security purposes.

[jakewrfoster]

Issue originally raised by @benpbolton.

[mogmarsh]

Any reason to not force it everywhere? Could combine with #85 if we are ok forcing it everywhere.

[benpbolton]

this is hard. The purist in me says that we should just look at what FORCE_SSL_ADMIN does and do that; because surely someone at some point is going to "need" http... or expect http and then they'll look up wp-alleyvate code to realize that our code is forcing https instead of the http they expected...

I dunno. It's really hard to justify not doing https everywhere these days ... our dev envs all support it... it's hard not to say 'force it everywhere', but the original intent of this was to mimic setting FORCE_SSL_ADMIN just... eternally on

[jakewrfoster]

My intent for #85 was to rely on the DB value to determine the scheme instead of some other layer of the application making that decision.