use protocol relative links for external Javascript includes to support HTTPS
add option to redirect to HTTPS before login