Enabling and enforcing https on the website will save lots of headaches issues over the next few months/years. I think it's worthwhile, for the following reasons: - Mainstream browsers (Chrome) will soon be switching to the `https://` schema by default - There is currently an SEO penalty in Google for sites without HTTPS - Generally just good practice