Wow it's 2016 and Last.fm still isn't on HTTPS for anything other then login. And the "new frontend" is in beta for around a year IIRC...