use HTTPS in bookmarklet for security & file:// compat