ok try this:
I looked at your site headers with curl,
Content-Security-Policy: base-uri 'none'; object-src 'none';
script-src 'report-sample' http://mechassaultonline.com/logs/
http://mechassaultonline.com/sidekiq/
http://mechassaultonline.com/mini-profiler-resources/
http://mechassaultonline.com/assets/
etc etc. so first change your site name in containers/app.yml to www.mechassaultonline.com and rebuild, then check the force https checkbox at https://www.mechassaultonline.com/admin/site_settings/category/all_results?filter=https. That should do it!