Isn't there a https upgrade header specifically for this kind of thing?