run secure functionality when domain requires secure submission

even when hitting the insecure URL