We might as well require ssl on form