CP is throwing Mixed Content over the place & HTTP 400 – Bad Request

New Install of Craft on AWS Lightsail with HTTPS and I am getting mixed content warnings on all of the frontend cp resources.

Added https://… to siteUrl, useSslOnTokenizedUrls, baseCpUrl and also updated .httaccess but still getting mxied content on the login page. Even deleted all of the files and folders in cpresources.

tried to login to see maybe I could update paths via the unstyled CP, but got:

HTTP 400 – Bad Request – yiiwebBadRequestHttpException
Unable to verify your data submission.

Am I missing anything?