FYI, I'm getting a security warning:

"This is probably not the site you are looking for! You attempted to reach www.hackerengine.com, but instead you actually reached a server identifying itself as *.heroku.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of www.hackerengine.com. You should not proceed."

I'm getting one, too:

    This Connection is Untrusted

    You have asked Firefox to connect securely to www.hackerengine.com, but we
    can't confirm that your connection is secure.

Sorry about that, and thanks for letting me know. I messed up our SSL settings at 3AM. New personal rule: no mucking about with crucial settings when exhausted.

It's fixed now.

i believe that might be the piggyback SSL add-on for heroku. with an improper SSL certificate implementation, that's bound to happen in 50%-75% of browsers

Shouldn't this page be on SSL, in compliance with Stripe's rules?

http://www.hackerengine.com/orders/new

totally agree. here's an actual 3.2 rails app on heroku SSL ($100/mo) rack with SSL certificate ($350/yr), Stripe and KissMetrics (no need for Bootstrap) — http://d.pr/B1Vr

Yes, it should be. It's at the very top of our list to fix this, but we're hoping to collect feedback while we undergo the certificate approval process.