Allow forcing of host page protocol

Avoid mixed content issues when host page is https://
but iframe URL is specified as http://.
I could think of a simpler way of writing this. :) I'm being nit-picky so I'm not going to say any more. :P