ah.. so you need a shot of the page to make use of

Ah, so it'll spoof the page on the fly but you need an initial copy of it to inject then if I read correctly. Now to retire http and and make https the norm (cough.. TR login.. cough).