fixed 'blocked loading mixed active content'

also added UTF8 charset to suppress warning in firefox console