Reported by @jaller94 on Matrix, the email verification link is currently hard coded as plain HTTP but then redirects to HTTPS, which may cause security warnings in some web browsers.
We should change it to https (or make it configurable, but not sure why anyone would want this particular feature over plain HTTP!).
This appears to be set in https://github.com/WebThingsIO/registration_server/blob/master/src/routes.rs#L619