[tombrossman]

You should probably add HTTPS too, especially for the account login page. Since you are using CloudFlare you can add it for free and this is best practice.

[jimant]

Noted and 100% agree with you. We'd go for Comodo most probably but we'll have a look at cloudflare too!

[iancarroll]

Let's Encrypt launched; you can get free 90-day certificates automatically: https://letsencrypt.org/