Return_to doesn't get set as HTTPS

[robobenklein]

I've been trying to figure this out for awhile, but apparently I cannot find where the POST to the /component/steamid/login actually returns the return_to url.

Since it returns an http url instead of an https, the OpenID server complains since their realms no longer match. (The request came from HTTPS and tried to call back to the HTTP url.)

Here's the form data that gets posted to the steam./login page:

Since the realms are different, the openid server puts back the error in the querystring:

&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
&openid.mode=error
&openid.error=realm+and+return_to+do+not+match

And then it gets redirected again to https because of the site-wide rule:

I feel like this should be a really easy JRoute fix somewhere, but I've been looking for the past few hours and couldn't find anything...