https://www.______.com
After they submit the form I want them to get back to the regular http site. Is there a way I can tell the browser to only encrypt the page containing the form?
You should always use the full URI in the location header. The spec doesn't allow for relative links (though they'll work with many browsers).