changed bitlove js inject to support https

support https websites correctly and remove unsafe script warning