add a danger message if visitor is not using SSL