reverted to using fixed https URLs for the bookmarklet