That is very interesting, that should have worked.
Using SSL will do the trick, but you don’t have to spend money on that. I recommend using cloudflare instead. They have shared SSL certificates, that are free. We actually use them on all of our sites, it is great. I think they have a wordpress plugin as well, to make it easier to set up.