Querki should be all-HTTPS

(User Story, Closed -> Fixed, Priority: High, Test Status: No automated tests yet , Reported By Justin du Coeur, )
Security
Summary: At this point, the technically-sophisticated users increasingly expect it, and it's hard to say that the system has good security without it. So we should just bite the bullet and do it.
Main issue to investigate is whether we have any components currently being served that expect HTTP -- eg, the images being pulled from Amazon.