Probably late to the party, but it doesn't work because you're matching everything in the previous setting, i.e., SECURE_REDIRECT_URLS = ['^'].
Remove (or at least adapt) this and it will work.