Replace leftover 'default' element in setFlash() calls
Avoid mix content warning in SSL sites

Similar to 1ac9ff61c44a7cfd03b441e0baf1baf737728909