just going to hardcode 'https' into the XML controllers. I don't think it's worth the time to figure out how to get the protocol from the request object, because I think it's a configuration issue relating to proxies.
review the rest of the tasks
turn the cart off in JMS staging
remove some things from the footer, and reduce the number of footer columns to make up for the fact there's less stuff in it now