updated URLs to HTTPS, target to _blank