make the widget take a protocol parameter, to allow css and js urls use https instead of http