Keep http(s) security on signup iframe
Change secure urls to absolute