Not sure who to direct this to but I went to reset my password and found that the address was:
does this seem secure? Isn't it suppose to be https?
Yes its secure.
If you happen to view the source for that page, you will see it uses https for passing the passwords. They just didn't make the whole page use https.