Use protocol-relative embed URLs in order to avoid "insecure content" warnings