Looks like you've cured the SSL/non-SSL problem, too.
Yes, a redirect was initially made by the Jetty web server to a non-SSL forum link (
https://jalbum.net/forum to
http://jalbum.net/forum/ ), but I fixed that.
ETA: It is still possible to end up on a non-secure page. If you explicitly visit the forum with http, then pull up the wiki from one of the menus, you're still in non-SSL territory. Maybe there's something I'm missing, here, but shouldn't the servers simply do an .htaccess RewriteRule on any non-SSL URL?
Yes, possibly... I'm now forcing SSL thru Java code for most pages at the main web site, and traditionally by the proxy for some URLs (for example those starting with /secure), but maybe it's time to do it for /help and /forum too. Especially now when HTTP/2 is used when using SSL.