обо всём понемногу...

configuration.php:
var $force_ssl = 0;        //Force areas of the site to be SSL ONLY.  0 = None, 1 = Administrator, 2 = Both Site and Administrator