facebook & twitter: use https when document is served via https