new setting WE_HAVE_SSL to indicate whether the site also has https (not just http)

we will offer using the https site if we have ssl, otherwise we will just warn about insecure http usage.