Move all main site accesses to https

Keeping everything on the same protocol appears to fix the occasional
problem where the http site says we're not logged in even after we
successfully logged in using https.
Show progress bar when fetching audio
v1.7