Somewhat unrelated rant:

I'm liking zenpayroll so far, but going to a payroll site (even the blog) and getting mixed https/http content raises flags for me.

If the blog doesn't need to be SSL, don't use SSL. If you want the blog to use SSL (it's redirecting), make sure all your external resources are too.