point signup form at non-https