The One-click Admin is not using https despite trusting it. Users have to manually correct the protocol in the browser.