fix mixed content sitewide: http -> https (bug 844010)