Disabled SSLZones

It is set on user/*, causes entire site to load https for any form
info, like logins.