removed protocol from JS, so it worked on https