Use relative urls wherever possible, and set the protocol to https when deployed.