Require CLS URLs to be HTTPS in form widgets.

If the HTTP form is used, the submission will fail on modern browsers
because the cross-origin AJAX POST will not follow the redirect that we
have in place to ensure SSL.
Merge pull request #196 from G5/require-https-for-forms

Require CLS URLs to be HTTPS in form widgets.