Change site to SSL

- watch for non-nsecure content
- change references throughout?
- add redirect to force secure