Thanks so much for the suggestions, and you're right - it should have worked with the forcing, but it would break the styles etc. I used every which setting set up possible and none of them solved the problem. If I could have found where the dynamic code was generated and alter it, i would have done that, but for my skill level: wordpress plus my theme plus my woocommerce plugin means so much dynamic stuff that I was unable to find it. Probably the combination of developing the site pre-ssl plus having a shared host on networksolutions was the issue that made all the logical solutions such as your suggestion fail.
Overnight I found this solution and it's solved all my problems - A this plugin http://snippets.webaware.com.au/snippets/wordpress-is_ssl-doesnt-work-behind-some-load-balancers/
The problem was actually this function is_ssl(), and this plugin did the trick.
Go team! thanks again!