https not forced on home page

Hey guys, 

Hey guys, hoping yall can help me with an issue. I need to force https but don't want to break anything. 

When a user goes to the site without typing www. or https:// it will not allow them to login and says unsecure. If they go to a page from there then they can login and it says https://. It seems that it's only on the home page. 

Thanks in advance! John 

In your .htaccess file in your root find:

RewriteEngine on

Below it add:
# Redirect if http
RewriteCond %{HTTPS} off
RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# set header if https
# Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" env=HTTPS
Header set Strict-Transport-Security "max-age=31536000" env=HTTPS