How to configure Secure Pages
If I recall, SecurePages has an easy config to enforce HTTPS for everyone on all paths. Check the README.

You could also ditch SecurePages and force all traffic to HTTPS via .htaccess.