How to force wordpress to use https for admin and login session?

put in your wp-config.php the following line.
define(‘FORCE_SSL_ADMIN’, true);