is it possible to configure "require ssl" set in the web.config file
https://technet.microsoft.com/en-us/library/cc771633
and does it only work with authentication mode="Forms" and not windows auth?
I do have the HSTS setting globally configured on the IIS server