Location widget: default to HTTPS for *everything*