fixed mixed content

force https for release notes iframe to avoid mixed contet