# Discourse Account Activation - Insecure Page Error

**URL:** https://meta.discourse.org/t/discourse-account-activation-insecure-page-error/115285
**Category:** Self-hosting
**Created:** [April 17, 2019, 6:31am UTC](https://meta.discourse.org/t/discourse-account-activation-insecure-page-error/115285 "2019-04-17T06:31:19Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![rajesh.saharan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rajesh.saharan/32/138638_2.png) [@rajesh.saharan](https://meta.discourse.org/u/rajesh.saharan)
#### Post date: [April 17, 2019, 6:31am UTC](https://meta.discourse.org/t/discourse-account-activation-insecure-page-error/115285/1 "2019-04-17T06:31:19Z")

</div>

I have installed discourse on my subdomain which is using Cloudflare DNS and flexible SSL.

The problem is with Admin account activation after installation. The activation URL I get is “http” and when I open it the browser show error, nothing happens on clicking “click here to activate your account”.

Here are the console errors.

> Refused to load the script `https://ajax.cloudflare.com/cdn-cgi/scripts/a2bd7673/cloudflare-static/rocket-loader.min.js` because it violates the following Content Security Policy directive: "script-src ‘unsafe-eval’ ‘report-sample’ `<URL> <URL><URL>`… Note that ‘script-src-elem’ was not explicitly set, so ‘script-src’ is used as a fallback.

> Mixed Content: The page at `<URL>` was loaded over HTTPS, but requested an insecure favicon `<URL>`. This request has been blocked; the content must be served over HTTPS.

---

<div class="post-metadata">

### Author: ![Dannii](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dannii/32/129087_2.png) [@Dannii](https://meta.discourse.org/u/Dannii)
#### Post date: [April 17, 2019, 6:35am UTC](https://meta.discourse.org/t/discourse-account-activation-insecure-page-error/115285/2 "2019-04-17T06:35:16Z")

</div>

Many of Cloudflare’s advanced features don’t work with Discourse, including the Rocket Loader. Disable all the optional features, including even the orange DNS, until you can ensure that your site is working.

---

<div class="post-metadata">

### Author: ![rajesh.saharan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rajesh.saharan/32/138638_2.png) [@rajesh.saharan](https://meta.discourse.org/u/rajesh.saharan)
#### Post date: [April 17, 2019, 7:03am UTC](https://meta.discourse.org/t/discourse-account-activation-insecure-page-error/115285/3 "2019-04-17T07:03:05Z")

</div>

Thanks. I disabled Rocket Loader. Now when I click on activation link, it says - “Sorry, this account confirmation link is no longer valid. Perhaps your account is already active?”

What’s the next step?

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [April 17, 2019, 11:56am UTC](https://meta.discourse.org/t/discourse-account-activation-insecure-page-error/115285/4 "2019-04-17T11:56:52Z")

</div>

Request another activation

---

<div class="post-metadata">

### Author: ![rajesh.saharan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rajesh.saharan/32/138638_2.png) [@rajesh.saharan](https://meta.discourse.org/u/rajesh.saharan)
#### Post date: [April 17, 2019, 12:03pm UTC](https://meta.discourse.org/t/discourse-account-activation-insecure-page-error/115285/5 "2019-04-17T12:03:53Z")

</div>

Thanks. I resolved this by adding one more Admin contact and registering through it.