UrlForm.cs: warn about urls with HTTPS