updated flavors.me rules

user profiles live on subdomains and shouldn't be redirected to https