Fix and secure the js handler
Force https to http in the Youtube handler