base href now permits https, to avoid browser errors.