https – always.
wrapper div for dropdown instead of appending to body