bug on force to https for authenticate
make sure lang param is passed around in forms