fixed webroot and updated links for HTTPS