Allow forcing of host page protocol

Avoid mixed content issues when host page is https://
but iframe URL is specified as http://.