Only the login is secure in the admin ... if you want all pages secure you need to see both URLs to https in the configure.php file ...