HTTP-HTTPS redirection

I might also add that you can cause havoc in some browsers switching back and forth between HTTP and HTTPS. It may be better to just leave it all HTTPS from the user's perspective.