Will change it to https as you suggest. Just need to get the ssl certificate.