Fix mixed-content warning on SSL and add redirect.