You must configure your web server to utilize the Secure Sockets Layer (SSL). All HTTP traffic between clients and server must be encrypted, or else your applications will be fundamentally insecure.