Allow checkout ajax urls to be secure