[swifty1]

[quote=JWait]The easiest method would be to require secure login. That would remove the "Username" box, "Password" box, and "Log in" link, replacing them with a button that says "secure login".

You can enable this in admin under "general settings" - "security options"
Check "Use HTTPS for users' login and registration:" and "Use secure login form on a separate page (HTTPS):" and uncheck "Do not redirect customers from HTTPS to HTTP:"

Applied the above but now the link Secure login and Register have a broken link.
Recover password still works.