Require SSL on get involved pages.

Since they can sign you in directly via persona.
Be really sure about email change.
[bug 918393] decode url before passing to persona