Fix some issues with secure cookies being overwritten by insecure site.

Now, /publish/{edit,addeditor,login,logout} must be accessed via
https://; other pages should not be (but can be).

publish/logout.php

@@ -1,4 +1,7 @@
 <?
+if ( ! isset($_SERVER['HTTPS'])) {
+   header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+}
 require_once("../session.lib.php");
 if (isset($_SESSION['editor'])) {
   if (isset($_COOKIE[session_name()])) {
@@ -18,7 +21,7 @@ if (isset($_SESSION['referrer'])) {
   header("Location: $url");
   return;
 } else {
-  header("Location: /");
+  header("Location: http://xxx.org.za/");
   return;
 }
 ?>