Yeah doing SSL is the goal.
We had SSL when we hosted on Heroku but since we moved to AWS something messed up with it.
Still working on it, but did not want to delay the relaunch over it.