Bug 25168: Give secure links in CentralAuth when securely logged-in getUrl() is -since r98745- an alias to getCanonicalUrl(), as we want the protocol-relative url, we need to use the new getFullUrl()