joshka

// ...
        protected void Application_BeginRequest(object sender, EventArgs e)
        {
            switch (Request.Url.Scheme)
            {
                case "http":
                    RedirectToHttps();
                    break;
                case "https":
                    AddStsHeader();