Don't use a secure URL for forms.

This is for browsers with bad CORS support that can't do http/https
cross fetching. It's not great.