I'm afraid if I use https I'll run out of governance if the user stays on the page too long