Hide “_scheme” in the list of requirements per URL

+ disable sandbox if the scheme of the URL doesn’t match the scheme, the
documentation is opened in
Merge PR #299 from SimonSimCity/https-fixes

Fix #266
Close #283
Close #299