I got a reply from HLJ regarding the secure link. Seems like it was indeed a bug. Here's what they wrote to me:
"Stock was not allocated to orders placed using the "secure.hlj.com" link you mentioned, because there was no stock to allocate. Only a few of the orders placed using the "secure.hlj.com" link were filled, and then only when customers cancelled orders placed earlier."