I see now you also have ssl, this is good. But I think all http must be forced to https
Do you know
http://cloudflare.com/? This is very easy for setting up and for making things like this, and can help with security and page caching also. Just make free account and set up in only 5 or 10 minutes