tweaks and fixes for https, moved default css for pages embeds to correct location