Upgrade option asks for my credit card number on non-secure page