Create a way to lockdown HTTP for access instead of hard-coding

CF does not provide for a way to do this automatically as a default for the whole CF environment.

My client would like to be able to close off the HTTP endpoints for everything in their environments to ensure nothing slips past.  Can we make it configurable from an environment perspective and not just an app perspective?

Most customer applications require security in the way they handle data. This implies that production applications need to force users to HTTPS endpoint and not allow access via HTTP endpoint. Cloud Foundry and Bluemix allow access on both endpoints by default. In order to force users to the HTTPS endpoint, app owners are required to add code to redirect all HTTP requests to HTTPS endpoint. This is platform specific code, which should be handled as a configuration for the app (via manifest?).