I had already set the https URL in Admin Setting to https://www.frenchcosmeticsforless.com but it is still not working. When I go to my cart it is shown as not secure, but when I manually adjust the url to https://www.frenchcosmeticsforless.com/cart.php then it becomes secure.
Sorry if I am being dim, but I removed the following from includes.php $pathtossl = ""; - My store and https url are both set to https://www.frenchcosmeticsforless.com/ but this has not cured the problem. Still cart.php is showing as unsecured.
It is working as it should. When you click checkout on the cart contents screen you are taken to enter details over a secure https connection - maybe you didn't continue the checkout?