I'm also a big fan of changing the complete domain to HTTPS. Therefore I'm using HSTS response header to enforce this. The great advantage is that the browsers remember that site as HTTPS and skips any redirect you may have to make from HTTP to HTTPS. So might worth looking at this as well. We are using KeyCDN with force SSL feature enabled.
