it definitely works on https://secure..., may indeed not work elsewhere -- I guess I can modify that to check both!