redirect to ssl if on payments page