Sorry if this isn't the right place to post. Currently http://accounts.cardhunter.com/ doesn't auto-redirect the user to the HTTPS endpoint. Perhaps it should?