Try to add an HTTP->HTTPS redirect to the apache config.

wsgi.conf

@@ -6,9 +6,20 @@ WSGIRestrictEmbedded On
 WSGIPassAuthorization On
 
 <VirtualHost *:80>
-
   SetEnvIf X-Forwarded-Proto https HTTPS=1
 
+  RewriteEngine On
+  # This will enable the Rewrite capabilities
+
+  RewriteCond %{HTTPS} !=on
+  # This checks to make sure the connection is not already HTTPS
+
+  RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
+  # This rule will redirect users from their original location, to the same location but using HTTPS.
+  # i.e.  http://www.example.com/foo/ to https://www.example.com/foo/
+  # The leading slash is made optional so that this will work either in httpd.conf
+  # or .htaccess context
+
   Alias /static /opt/python/current/app/static/
   <Directory /opt/python/current/app/>
     Order allow,deny