Oh...this should be refactored to be `/account/update` or something. No point in hosting the page on https only to post to http.