Cps available only via http

I think a rule in HTTPS Everywhere also helps :smile: :