They need to redirect any http to https for the sign-up page; they already do this for the login page.
They need to redirect any http to https for the sign-up page; they already do this for the login page.