load resources over https
upgrade links on the homepage to HTTPS