I see it's looking much better now, if you have a link to the e365 mod I'll have a look at the code and see where to fix it.
I would also add the following to your headerincludes template, it will allow modern browsers to
update insecure requests (http to https) wherever it can.
Code:
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">