Redirecting from http to https is really troublesome. Buying ssl certificate directly to install it will sometimes cause unpredictable problems, but it is worth it. Users will not have risk warnings...