Lock history to admin only
Remove http from js src