When I login to Populi, I usually then click them "Email" link to load google apps email interface. It loads the email without the https:. My understanding is that if you visit a page that isn't https it is much easier for people on the same network (i.e. public/student wifi) to sidejack your computer?
Can the link to the email be https://... ?