Change iframe url to https

... so it can be loaded over proxies that only allow wss://

@jessmartin , would you mind reviewing this for me?