I don&#x27;t know why sites don&#x27;t just use HTTPS for everydamnedthing. It&#x27;s 2016. SSL is not <i>that</i> computationally expensive and it&#x27;s just easier to develop an entire site that way anyway (rather than making some pages secure and other non-secure). Just redirect everything to https and forget about it.