OAButton/OAButton — pull request #164 by kynan (2013-11-19 00:51:22+00:00)
Title: GET request to http://www.openaccessbutton.org/api/form/page2/ sent over clear HTTP

Should be HTTPS like the rest of the requests, especially since it contains the CSRF token.