Don't use a secure URL for forms.

This is for browsers with bad CORS support that can't do http/https
cross fetching. It's not great.
Merge pull request #289 from G5/less-than-secure-forms

Don't use a secure URL for forms.