I'm pretty sure this will fail in HTTPS environments if you don't wrap the path inside url_for_path().