Enabling and enforcing https on the website will save lots of headaches issues over the next few months/years.
I think it's worthwhile, for the following reasons:
- Mainstream browsers (Chrome) will soon be switching to the
https:// schema by default
- There is currently an SEO penalty in Google for sites without HTTPS
- Generally just good practice