Sidebar: We should drop this option and make people choose all https or all http. There is 0 point in an https login page if the cookies are sent in the clear anyways.