Http user warning

Also refs #39: Contains all the admin warning code for #210, but also includes a warning on sensitive user pages (login, registration and settings) that will show if that page is HTTP, or if the form action is HTTP (important to check both to guard against misconfiguration).