Looks good. Could you make sure all your requests go over TLS please? The javascript console has pages of mixed content warnings.