Fix SSL vs non-SSL widget URLs