Where are you entering your password? The few pages where you can (login, register, password reset) all use https already
The reason https is forced disabled except for the 3 pages I just mentioned, is because "the ad doesn't work on https", or so i'm told. I'd love to change it too ... the reasoning doesn't make much sense, i'm sure the ad can be fixed.
Also O_o it made 66 requests when I turned off my ad blocker and my tracker blocker. That's an insane amount of requests, definitely reinforces why I have those ... I know we don't have that many things on the website, I've seen the source. I think it's just google analytics and the ad.