fixed bug: secure links now open in new window too