Notably: you are using Cloudflare as well. And Cloudflare and WordPress don’t play well together. Cloudflare redirecting your website to HTTPS may have also caused your initial issue.
There are a few different ways to fix this, but our recommended way is to configure your website with Full SSL, so WordPress also knows that your visitors are using HTTPS: