Besides setting this option, you can force the session to stay https by including a https when you type in the address.

Instead of just typing www.gmail.com or gmail.com or etc. type out...