Detect base url as HTTPs where appropriate (so at least you can sign up ...

...securely without broken CSS)