Directing applicants to a secure form not counting as SSL