Add support for both http and https

remove automatic http to https redirect

use window.location.protocol rather than assuming https in several locations

plugins @include + @match cover both https and http


some things remain as https - but at least https items in a http page doesn't produce browser warnings, unlike http items in a https page