headings now includes https links
prevent downloading whole page - see #4