GET request to http://www.openaccessbutton.org/api/form/page2/ sent over clear HTTP

Should be HTTPS like the rest of the requests, especially since it contains the CSRF token.