Won't stay logged in, can't log in...

Why not put a redirect to https into .htaccess so everyone automatically ends up on the SSL-version of the site?

because that is what started causing the problem In the first place. We are in the process of adding a nginx proxy will be handling the tls termination and just doing plain http to the apache server