- switch rule to default_off , active mixed-content breaks the page in firefox completely
- add www subdomain to be secured
- remove static_assets from rule so the rule matches the whole subdomain including all subfolders