SSL form source code on http page seems to work. Is it?