Turn SSLProxyEngine On in secure.mysociety.org httpd config, since citizenconnect only works over SSL