I made a server change. It should be re-directing you to the https version of the site automatically now (this setting got missed when I changed it over) so if you had bookmarked the https version, came in through the homepage (which does redirect to https automatically) or just clicked from somewhere that already had the https you were fine. But if your default bookmark or auto-complete was for http it was giving you the unsecured version. Now it doesn't do that.
Let me know if this has improved either of your issues!