Need to disable autocomplete forms; also broken with HTTPs

Hello there,

We're running OpenScholar on HTTPs. We've freshly installed Beta 14. Form items that have autocomplete (on "Add publication", there is the "Authors" and "Tags"), we're getting the following errors when it attempts to autocomplete:

An HTTP error 0 occurred. [root_path]/kkitay/biblio/autocomplete/contributor

Furthermore, following that URL will lead you to an unprotected JSON array of users to autocomplete with. So, my following two questions:

1. What's the best way to turn off autocomplete for specific form items? (Auto-complete for users needs to be turned off, as it is in conflict with FERPA.) I looked in the scholar_publications module, where you're using hook_form_alter to modify $form['biblio_contributor1'] and $form['author']; but the form itself isn't generated in scholar_publications. I'm able to disable autocomplete for the first, automatically created field, but the "More authors" button is calling a function somewhere else that adds in another field with autocomplete.

2. How do we disable the generation of that array (which is available to anyone that navigates to it)

Thank you!