Require CLS URLs to be HTTPS in form widgets.

If the HTTP form is used, the submission will fail on modern browsers
because the cross-origin AJAX POST will not follow the redirect that we
have in place to ensure SSL.